CSRF Vulnerability in Olevmedia Shortcodes Plugin for WordPress
CVE-2015-9421

6.5MEDIUM

Key Information:

Vendor: Wordpress
Status: Olevmedia Shortcodes
Vendor: CVE Published:; 26 September 2019

What is CVE-2015-9421?

The Olevmedia Shortcodes plugin for WordPress before version 1.1.9 is susceptible to a Cross-Site Request Forgery (CSRF) vulnerability. This security flaw allows attackers to exploit the wp-admin/admin-ajax.php?action=omsc_popup id parameter, potentially leading to unauthorized actions being performed and Cross-Site Scripting (XSS) payloads being executed in the context of the user's session. Such vulnerabilities can compromise user data and lead to further attacks if not patched.